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Amendments to the Claims 

The following listing of claims will replace all prior versions and listings of 
claims in the application. 

1 . (Withdrawn) An interrupt manager for use in a distributed control system, 
the interrupt manager comprising: 

circuitry that: 

(i) receives interrupt signals including a current interrupt; 

(ii) determines whether the current interrupt can be processed without delaying 
processing of a non-interrupt task beyond a predetermined time; and 

(iii) inhibits, at least temporarily, processing of the current interrupt when it is 
determined that the processing of the current interrupt would delay the processing of the 
non-interrupt task beyond the predetermined time. 

2. (Withdrawn) The interrupt manager of claim 1, wherein the circuitry 
determines whether the current interrupt can be processed without delaying the 
processing of the non-interrupt task beyond the predetermined time by determining 
whether a total number of interrupts including at least one of the current interrupt, a 
recently-performed interrupt and a pending interrupt would exceed a maximum number 
of interrupts. 

3. (Withdrawn) The interrupt manager of claim 2, wherein the maximum 
number is associated with a time interval and represents a maximum number of interrupts 
that can be performed within the time interval. 

4. (Withdrawn) The interrupt manager of claim 3, wherein the total number 
of interrupts includes, in addition to the current interrupt, any interrupts that have been 
received and not yet processed. 
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5. (Withdrawn) The interrupt manager of claim 3, wherein the total number 
of interrupts includes, in addition to the current interrupt, all interrupts that have been 
received since a first time. 

6. (Withdrawn) The interrupt manager of claim 1, wherein the circuitry 
determines whether the current interrupt can be processed without delaying the 
processing of the non-interrupt task beyond the predetermined time by determining 
whether the processing of the current interrupt could be completed within an interrupt 
window. 

7. (Withdrawn) The interrupt manager of claim 6, wherein the interrupt 
window is refreshed upon expirations of window periods. 

8. (Withdrawn) The interrupt manager of claim 1, wherein the circuitry 
determines whether the current interrupt can be processed without delaying the 
processing of the non-interrupt task beyond the predetermined time by determining 
whether the processing of the current interrupt could begin within an interrupt window. 

9. (Withdrawn) The interrupt manager of claim 1, wherein the circuitry 
inhibits the processing of the current interrupt by masking the current interrupt. 

10. (Withdrawn) The interrupt manager of claim 1, wherein the circuitry 
determines whether the current interrupt can be processed without delaying the 
processing of the non-interrupt task beyond the predetermined time by comparing a first 
priority associated with the current interrupt with a second priority of the non-interrupt 
task. 

1 1 . (Withdrawn) The interrupt manager of claim 1 0, wherein the first priority 
is that of a proxy task generated in response to the receiving of the current interrupt based 
upon scheduling data of a message causing the current interrupt. 
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12. (Withdrawn) The interrupt manager of claim 1, wherein the circuitry 
temporarily inhibits the processing of the current interrupt by placing information relating 
to the current interrupt in a later position in a queue. 

13. (Withdrawn) The interrupt manager of claim 1, wherein the circuitry 
determines whether current interrupt can be processed without delaying the processing of 
the non-interrupt task beyond the predetermined time by determining whether at least one 
completion timing constraint associated with the non-interrupt task would be violated if 
the processing of the current interrupt occurred. 

14. (Withdrawn) A method of handling interrupts for use with a processor in 
a distributed control system, the method comprising: 

receiving a current interrupt signal; 

determining whether processing of the current interrupt signal would delay 
processing of a non-interrupt task beyond a predetermined time; and 

inhibiting, at least temporarily, the processing of the current interrupt signal when 
it is determined that the processing would delay the processing of the non-interrupt task 
beyond the predetermined time. 

15. (Withdrawn) The method of claim 14, further comprising delaying the 
processing of the current interrupt signal to a later time if it is determined that the 
processing would delay the processing of the non-interrupt task beyond the 
predetermined time. 

16. (Withdrawn) The method of claim 14, wherein the determining includes: 
comparing a total number of interrupt signals including at least the current 

interrupt signal with a maximum number of interrupt signals. 

17. (Withdrawn) The method of claim 14, wherein the determining includes 
determining whether at least one of: the processing of the current interrupt signal can be 
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begun within a current time window; and the processing of the current interrupt signal 
can be completed within the current window. 

18. (Canceled) 

19. (Withdrawn) A method of scheduling messages being transmitted on a 
network among spatially-distributed control components of a distributed control system, 
the method comprising: 

receiving a message; 

receiving a relative timing constraint concerning the message, wherein the relative 
timing constraint is indicative of an amount of time; and 

inserting the message into a queue at a location that is a function of the relative 
timing constraint. 

20. (Canceled) 

21. (Withdrawn) The method of claim 19, wherein the location is also a 
function of a priority associated with the message and of an absolute timing constraint 
concerning the message. 

22. (Withdrawn) The method of claim 21, wherein the absolute timing 
constraint is a particular time. 

23. (Withdrawn) The method of claim 19, wherein the inserting of the 
message into the queue is governed by a message scheduler implemented by a processor 
executing a portion of a distributed operating system providing respective portions of an 
overall completion timing constraint of a communication circuit to each of a plurality of 
application programs, the respective portions setting respective deadlines for the 
application programs. 
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24. (Currently Amended) A method of coordinating a new control application 
program with other control application programs being performed on a distributed real- 
time operating system, wherein the distributed real-time operating system is for use with 
a control system having spatially separated control hardware nodes, each node having at 
least one resource, and the control system further including a network connecting a 
plurality of hardware nodes r e sourc e s , the method comprising: 

(a) executing the real-time operating system on at least one processor of the 
hardware nodes; 

(b) managing at least one resource from at least a first and a second, spatially 
separated control hardware node with the real-time operating system; 

(c) receiving the new control applicatio n to be registered with the real-time 
operating system ; 

(b){d) identifying control hardware resourc e s from a r e sourc e list matching 
control hardware resources required by the new control application program from a 
resource list to resources on at least the first and the second spatially separated control 
hardware nodes ; 

(e)(e) identifying a fixed time interval associated with the new control application 
program for completing execution of at least a portion of the new control application 
program; 

(d) (f) allocating the new control application program to the identified control 
hardware resources; 

(e) (g) allocating portions of the fixed time interval associated with the new 
control application program to each identified control hardware resource; and 

fflfh) determining whether the allocated portions of the new control application 
program can be executed within the portion of the fixed time interval allocated to each 
identified control hardware resource while requirements of the other control application 
programs also are met. 

25. (Canceled) 
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26. (Original) The method of claim 24, further comprising: 

collecting statistics regarding a usage of the control hardware resources as the 
new control application program and other control application programs are being 
performed; and 

optimizing the usage of the control hardware resources based at least in part upon 
the collected statistics. 

27. (Currently Amended) A method of operating an application program on a 
distributed control system having a plurality of nodes wherein each node includes a 
memory device, a processor, and a communication means, the method comprising: 

executing a real-time operating system on at least one processor of the nodes; 

managing at least one resource from at least a first and a second node with the 
real-time operating system; 

receiving high-level requirements concerning the application program; 

determining low-level requirements based upon the high-level requirements; 

obtaining a fixed completion time requirement for the application program; 

allocating each of the high-level requirements and the low-level requirements to 
at least one of the nodes; 

allocating at least a portion of the fixed completion time to each node having been 
allocated one of the requirements; 

determining at each node to which a requirement was allocated whether the 
allocated requirements may be completed within the portion of the fixed completion time 
allocated to that node; and 

operating the application program in accordance with the allocated requirements. 

28. (Original) The method of claim 27, 

wherein the high-level requirements include at least one of a hardware 
requirement, a completion-timing constraint, a message size, an inter-arrival period, a 
need for remote system services, and a type of priority, and 

wherein the low-level requirements include at least one of an amount of memory, 
a network bandwidth, and a processor bandwidth. 
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29. (Original) The method of claim 27, wherein the allocating of the low- 
level requirements includes allocating the low-level requirements to both a primary 
hardware resource and an implicit hardware resource. 

30. (Canceled) 

31. (Previously presented) The method of claim 24 wherein the control 
hardware resources include multiple nodes and each node includes a memory device, a 
processor, and a communication means. 

32. (Previously presented) The method of claim 31 wherein the new control 
application program is allocated to a plurality of nodes. 

33. (Previously presented) The method of claim 27 wherein the fixed 
completion time requirement is one of the high-level requirements. 

34. (Previously presented) The method of claim 28 wherein the fixed 
completion time requirement is determined based on the high-level and the low-level 
requirements. 
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